Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File:                     dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier:          NciXydOo/G0CFwPDaCXR7OrZbtSHN74OuSFr7XQuXsY=
Subject key identifier:   EB:B6:C7:B4:B8:5A:73:A0:8B:E6:69:F2:5C:3B:A4:E6:D9:93:57:7C
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer:       /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number:          53
Signing time:             Wed 15 Apr 2026 07:54:09 +0000
Manifest this update:     Wed 15 Apr 2026 07:54:09 +0000
Manifest next update:     Wed 22 Apr 2026 07:54:09 +0000
Files and hashes:         1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: pFfkGJMK5Rjv9q4qA6mI5W2lLzAcES49L+UZQxVCjyk=)
                          2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: o1fiXCjFDXjKshZmXjJ558GbsN9d78xYw5aDtUQ+m18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
                          rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
        Validity
            Not Before: Apr 15 07:54:09 2026 GMT
            Not After : Apr 22 07:54:09 2026 GMT
        Subject: CN=69df4421-7eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:24:91:4f:33:26:f4:f9:71:32:53:e2:fe:
                    24:cb:56:e0:8d:16:ec:4e:06:f0:d6:bd:66:c6:ae:
                    bb:1d:85:d0:f4:66:93:d1:c5:aa:9c:10:8b:3c:a4:
                    81:cb:30:31:5c:1a:af:6d:03:3e:59:35:e2:62:ab:
                    62:d9:54:88:02:16:e3:66:f0:d2:15:fc:1d:e8:d6:
                    2e:87:28:a1:4c:b5:d7:97:ae:65:44:0f:dc:2c:35:
                    70:30:e4:5b:6d:ab:36:15:d9:d4:5c:ef:52:c4:f8:
                    1c:4e:2c:d8:e0:39:08:95:84:82:fe:73:a0:78:5f:
                    6e:26:0e:6d:a6:99:2a:71:21:00:2c:cf:a8:00:6f:
                    95:1a:0f:8e:36:b4:f0:d9:e9:e0:34:62:11:ef:29:
                    bc:18:44:47:f3:ce:8b:94:45:21:ac:89:50:3d:17:
                    67:6f:7b:a5:8c:c4:c1:a0:6e:fa:e3:bb:96:4f:e6:
                    e4:9d:b2:c1:c0:8a:61:8f:d3:cc:1e:db:2d:d0:fc:
                    53:c7:56:08:94:28:8e:13:32:07:c9:3e:df:1e:b8:
                    46:08:0b:a7:d9:70:55:41:73:50:dd:c3:06:20:5e:
                    02:d3:d5:43:6c:16:77:c7:45:55:46:53:e7:f8:d7:
                    4c:f2:cb:62:20:5e:67:b6:7a:77:63:36:dc:88:fd:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B6:C7:B4:B8:5A:73:A0:8B:E6:69:F2:5C:3B:A4:E6:D9:93:57:7C
            X509v3 Authority Key Identifier:
                keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:24:e2:9f:56:ea:b7:38:e7:cf:00:4d:19:e2:67:54:55:06:
         0f:8c:5a:4f:10:64:0b:22:97:19:2c:f6:59:59:57:b3:0e:fe:
         42:55:ac:7e:e4:6d:53:a1:d0:96:55:56:90:0e:5c:c0:d3:7d:
         e3:39:10:da:92:82:5e:7d:c3:7d:37:50:8c:d5:6d:58:95:b7:
         61:c0:a3:ab:9d:a7:62:03:15:71:0b:40:51:b3:9a:ba:6b:db:
         84:99:30:dd:69:8c:fc:96:15:6e:2c:da:5b:2d:3a:e4:73:c0:
         cf:f1:09:12:22:4b:2c:0a:0f:d1:a1:c2:ea:15:c4:0f:f7:f6:
         c6:00:2a:07:1d:37:c6:ef:1b:39:c7:c3:e4:a0:44:f4:42:e5:
         a2:e2:5a:ea:1d:ab:41:a9:9b:f5:d6:3e:06:36:93:bb:f4:60:
         c5:2c:d9:5a:1d:74:c7:ef:a4:69:10:d1:bb:08:6c:58:ba:52:
         e6:c3:e5:26:77:93:8f:fb:60:d6:92:b6:4b:6c:4f:c7:56:0e:
         cb:7d:16:ac:d9:4d:07:39:5d:2a:32:9c:cb:88:60:f7:1b:6d:
         d7:cd:89:c9:39:ee:3c:81:83:bd:c2:6a:ea:a4:8e:91:d4:e0:
         26:1a:d1:d1:6e:6e:ce:f5:c6:d3:ec:07:96:d6:ae:07:ae:f2:
         70:a1:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:34 2026 by rpki-client